El 14/12/21 a las 18:49, McDoob escribió:

Hi All!

I am hosting PiBBS on the default telnet port (23) and, as you can imagine, I'm getting a lot of...shall we say...unwanted traffic. By default, Mystic is doing a pretty good job of banning the ones that are actively trying to brute-force the login.

if you use raspian, you have fail2ban.
--- SBBSecho 3.14-Linux
* Origin: Dock Sud BBS - bbs.docksud.com.ar - Argentina (21:2/151)

I am hosting PiBBS on the default telnet port (23) and, as you can imagi I'm getting a lot of...shall we say...unwanted traffic. By default, Myst doing a pretty good job of banning the ones that are actively trying to brute-force the login.

Yeah I have both port 22 and 23 for mystic. Im getting rammed with logins.
But what I did is:

- Auto whitelist logged in users
- Ban on 4 failed attemps in 2 minutes

That seems to keep the bruteforces at a minimum. I do not like to change the port as I do not believe in security by obscurity.

oP!

--- Mystic BBS v1.12 A46 2020/08/26 (Linux/64)
* Origin: TheForze - bbs.opicron.eu:23 (21:3/126)

On 27 Jan 2022 at 01:04p, opicron pondered and said...

- Ban on 4 failed attemps in 2 minutes

I do this, works fine for me :)

--- Mystic BBS v1.12 A47 2021/11/06 (Linux/64)
* Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (21:1/101)